Which two statements apply to dynamic access iists?(choose two)
A.
they offer simpler management in large internetworks.
B.
you can control logging messages.
C.
they allow packets to be filtered based on upper-layer session information.
D.
you can set a time-based security policy.
E.
they provide a level of security against spoofing.
F.
they are used to authenticate individual users.
The answer is A and F.
See the same question with these answers (Question 205):
http://www.aiotestking.com/cisco/2011/08/which-two-statements-apply-to-dynamic-access-lists/
http://www.9tut.com/ccna-access-list-questions-2, Q.4
A and F
Dynamic ACLs have the following security benefits over standard and static extended ACLs:
+ Use of a challenge mechanism to authenticate individual users
+ Simplified management in large internetworks
+ In many cases, reduction of the amount of router processing that is required for ACLs
+ Reduction of the opportunity for network break-ins by network hackers
+ Creation of dynamic user access through a firewall, without compromising other configured security restrictions
(Reference: CCNA Exploration 4 – Dynamic ACLs)